mo wasay – Mohammed Wasay

Adding an Application Registration\ Service Principal to another Application Registration\ Service Principal

November 8, 2022November 8, 2022 by mo wasay

Typically when working with App Roles in Azure Active Directory for a single application registration or service principal and then self consuming that app role as an Application API Permission you would see in the Enterprise Application > Users and Groups blade that service principals are added. Every now and then a question comes up … Read moreAdding an Application Registration\ Service Principal to another Application Registration\ Service Principal

Get all the domains controllers in the AD forest along with their current FSMO roles

September 17, 2022June 11, 2021 by mo wasay

In a large enterprise an admin would need to keep track of all the domains in a AD forest, the domain names, the domain controllers (DC) , their IPs, and what FSMO roles does a DC hold. Wrote a little script to just do that…

Force synchronization for DFSR-replicated SYSVOL

April 23, 2020April 22, 2020 by mo wasay

One of my clients had a problem with processing GPO on client computers. Different computers applied different settings from the same GPO but from different domain controllers. All tests related to replication was successful, all GPOs are applied, but replication between domain controllers was a problem, and because of that most clients had a different … Read moreForce synchronization for DFSR-replicated SYSVOL

Get Inactive Users Report for the past 60 days in a multi domain environment

September 18, 2022February 18, 2020 by mo wasay

I had a request recently to provide an inactive user report for the past 60 days. Basically, find out which accounts have not logged in for the past 60 days so action can be taken against them. The request was for a multi domain forest which queries every domain controller and gets the latest lastlogon … Read moreGet Inactive Users Report for the past 60 days in a multi domain environment

Get Primary, Secondary, Tertiary DNS values and more from Multiple Servers

September 18, 2022February 13, 2020 by mo wasay

Came across a unique request to get primary, secondary, and tertiary DNS values for multiple computers/servers across the domain. I started writing the script and got what I wanted. Now this started off as just to query for DNS Server information, but then I thought to add other pieces to get myself a good Network … Read moreGet Primary, Secondary, Tertiary DNS values and more from Multiple Servers

Fix Active Directory broken security inheritance problem

September 18, 2022August 8, 2019 by mo wasay

Ran into a situation at a client location where in Active Directory, the security permissions applied to an OU were not getting inherited permissions on to the objects. Basically, security inheritance was broken.This causes a problem when the administrative accounts or groups needing to modify an attribute on the AD object throw errors, or are … Read moreFix Active Directory broken security inheritance problem

How to Fix: Attribute userAccountControl of DC is: 0x82020

July 2, 2019July 2, 2019 by mo wasay

When running a DCDiag at a customer site today I had the following error occur: It is a bug when we pre-create a computer account in ADUC and then promote it as DC, the UserAccountControl is set to 532512 instead of the default 532480. You need to manually set the vaulue to 532480 in ADSIEDIT.MSC. … Read moreHow to Fix: Attribute userAccountControl of DC is: 0x82020

Get All DCs in the Entire Forest

March 6, 2019 by mo wasay

Getting a know a new environment for a new client and I a quickly needed information about all domain controllers in the entire forest. Wrote a small little script to provide me all the information I needed:

Import-Module ActiveDirectory

function Get-AllDCsInForest{
[CmdletBinding()]
param(
    [string]$ReferenceDomain = $env:USERDOMAIN
)
 
$ForestObj = Get-ADForest -Server $ReferenceDomain
foreach($Domain in $ForestObj.Domains) {
    Get-ADDomainController -Filter * -Server $Domain | select Domain,HostName,Site, IPv4Address, OperatingSystem, OperatingSystemVersion
     
}
 
}

Get-AllDCsInForest| Export-Csv -Path C:\Scripts\AllDcs.txt -NoTypeInformation

Import-Module ActiveDirectory

function Get-AllDCsInForest{

[CmdletBinding()]

param(

[string]$ReferenceDomain = $env:USERDOMAIN

)

$ForestObj = Get-ADForest -Server $ReferenceDomain

foreach($Domain in $ForestObj.Domains) {

Get-ADDomainController -Filter * -Server $Domain | select Domain,HostName,Site, IPv4Address, OperatingSystem, OperatingSystemVersion

}

Get-AllDCsInForest| Export-Csv -Path C:\Scripts\AllDcs.txt -NoTypeInformation

Point a Window Client or Server to a particular Domain Controller

November 20, 2020December 4, 2018 by mo wasay

When troubleshooting domain controller related issues from a client side there are many things that needs to be checked. Few items that need to checked: Review if DCs are hardcoded in the application residing on the client (if application related) Ports are opened from the client to the DC Check if the DCs in the … Read morePoint a Window Client or Server to a particular Domain Controller

Convert a Dynamic IP to Static

September 18, 2022October 18, 2018 by mo wasay

Working on a project where on some servers the DHCP assigned addresses needs to be converted to static. Since there is always more than one…I needed to script it. Here is a quick way to do it via PowerShell. Hope this helps!